blueteamsec

477 readers

32 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

[email protected]

176

4

Weaponizing image scaling against production AI systems (blog.trailofbits.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

177

4

Scam Farms Marque and Reprisal Authorization Act of 2025 - authorize the President to issue letters of marque and reprisal with respect to acts of aggression against the United States (www.congress.gov)

submitted 1 week ago by [email protected] to c/[email protected]

1 comments fedilink

178

5

"Scamlexity": When Agentic AI Browsers Get Scammed (guard.io)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

179

5

CVE-2025–41688: Bypassing Restrictions in an OT Remote Access Device (medium.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

180

5

MCP vulnerability case study: SQL injection in the Postgres MCP server (securitylabs.datadoghq.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

181

4

MURKY PANDA: Trusted-Relationship Cloud Threat (www.crowdstrike.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

182

5

Microsoft Curbs Early Access for Chinese Firms to Notifications About Cybersecurity Flaws (archive.ph)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

183

5

Palm Coast Hacker Sentenced To 10 Years In Prison (www.justice.gov)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

184

5

Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025 (gfw.report)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

185

3

The Department of Energy’s Unclassified Cybersecurity Program – 2024 (www.oversight.gov)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

186

2

GroupPolicyBackdoor: Group Policy Objects manipulation and exploitation framework (github.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

187

1

UAC-0057 keeps applying pressure on Ukraine and Poland (harfanglab.io)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

188

1

APT MuddyWater Targets CFOs with Multi-Stage Phishing & NetBird Abuse (hunt.io)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

189

6

Oregon man charged with administering “Rapper Bot” DDoS-for-hire Botnet (www.justice.gov)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

190

5

Conflicting Scores, Confusing Signals: An Empirical Study of Vulnerability Scoring Systems (arxiv.org)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

191

3

A Cereal Offender: Analyzing the CORNFLAKE.V3 Backdoor | Google Cloud Blog (cloud.google.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

192

5

Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure (www.ic3.gov)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

193

2

Behind the Curtain: How Lumma Affiliates Operate (www.recordedfuture.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

194

3

QuirkyLoader - A new malware loader delivering infostealers and RATs (www.ibm.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

195

4

Cybercriminals Abuse AI Website Creation App For Phishing (www.proofpoint.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

196

1

Advance Security Solutions offer $20mil for SMS/MMS 0day, $15 mil for iOS chains etc. (advance-sec.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

197

3

How a Czech Supply Chain Feeds the Global Spyware Machine - VSquare.org (vsquare.org)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

198

5

Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices (blog.talosintelligence.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

199

2

Guess Who Would Be Stupid Enough To Rob The Same Vault Twice? Pre-Auth RCE Chains in Commvault (labs.watchtowr.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

200

3

Elastic response to blog ‘EDR 0-Day Vulnerability’ (www.elastic.co)

submitted 2 weeks ago by [email protected] to c/[email protected]

0 comments fedilink